Privacy.

Last updated: 28 September 2026

Who is responsible for your data

ABDULLAH TALAL KABLI Establishment, a sole establishment registered in the Kingdom of Saudi Arabia, unified national number 7055026962, Riyadh, Kingdom of Saudi Arabia, is the controller of the data described on this page. Registered with the Saudi Data and AI Authority (SDAIA) as a controller, registration 3260007561. Contact: atk@atkabli.com.

The Mac app

• Your audio and your takes stay on your Mac: in the takes folder you choose and, when “Add each take to Music” is on, in the Music app on that Mac. Mixback never sends your recordings to us. The free version needs no account. Pro will use an account, described below.
• The app has no analytics, no telemetry, no ads and no third-party code.
• Mixcloud is used only when you ask. Connect opens Mixcloud’s sign-in in your browser. This site trades the one-time code from that sign-in for a Mixcloud token and passes the token to the app; it never logs or stores the code or the token. The token is kept in your Mac’s keychain, and Disconnect in Settings removes it.
• A take is sent to Mixcloud only when you press Post to Mixcloud. It goes straight from your Mac to Mixcloud, private by default, with your Mixcloud username as the artist.
• While Mixcloud is not connected, opening the takes page or Settings asks this site once whether the Mixcloud sign-in is available. The request carries nothing about you or your takes beyond what every web request carries, such as your IP address.
• The version of Mixback from outside the Mac App Store can check for updates. The check is off until you turn it on in Settings or press Check. It reads one small file from this site and sends nothing else beyond what every web request carries. The Mac App Store version has no update check: the App Store handles updates.

This site

• When you join the Pro early-access list we store your email, what you mix on, when you joined and which version of the consent text you agreed to, the campaign tag in the link you used (if it had one) and your browser family, such as “Safari on Mac”.
• We use it only to email you about Pro early access and Mixback news.
• It is kept in a Cloudflare D1 database. We do not sell it or share it.
• To stop repeat tries at the signup form and at the Mixcloud sign-in, we keep a salted hash of your IP address, never the address itself. The date is part of the hash, so it changes every day, and hashes older than a day are deleted the next time either is used.
• This site sets no cookies and runs no tracking or analytics. Cloudflare, which hosts it, handles each request like any web host.
• You can unsubscribe from any email we send.

Mixback cards

• When you claim a Mixback NFC card on this site, we store your email, your DJ name, the card number and the time you gave consent.
• A public DJ page for your card shows only if you opt in. Without that, nothing about you is shown publicly.

Pro accounts (planned)

Pro is not open yet. When it opens, Pro will use an account. You will sign in with a one-time link sent to your email. When you create a Pro account or redeem a Pro code, we will store:

• your email address;
• the one-time sign-in links we send, kept until used or expired;
• your Pro status: plan, start and end dates, and the Paddle customer and subscription IDs that link your account to your purchase;
• the Macs that use your Pro license, as a random device ID we create and the device name you see in the app;
• promotional codes you redeemed and when;
• the date and time of each license check.

Why: to give you Pro and keep it working (performance of our contract with you; GDPR Art 6(1)(b)), and to stop license and code abuse (our legitimate interest; GDPR Art 6(1)(f)).

We do not store your name, postal address, or card details. We do not receive your recordings.

Payments through Paddle

Paddle.com is our reseller and the Merchant of Record for purchases on our website. Paddle collects your payment details, billing country, and tax information, and uses them as an independent controller under its own privacy policy (paddle.com/legal/privacy). Paddle tells us your email address, country, plan, and payment status so we can give you Pro. We never see your full card number.

Emails we send

• Service emails: sign-in links, receipts and renewal reminders (some sent by Paddle), and notice of changes to your subscription or these terms. You cannot opt out of these while you hold Pro, because they are part of the service.
• News about Mixback: only if you opted in. Every such email has an unsubscribe link.

Where the data is kept and who handles it

• Cloudflare, Inc. hosts this site and its database (Cloudflare D1). Cloudflare processes the data on our instructions.
• Sign-in and account emails, when Pro opens, are sent through Resend, Inc.
• Paddle, as described above.

These providers may process data outside your country, including in the United States and the European Union. We are based in Saudi Arabia. For transfers to our providers we rely on their data processing terms, which include the EU standard contractual clauses. The Saudi (SDAIA) standard contractual clauses and transfer risk assessments are being put in place with each provider.

How long we keep it

• Pro account data: while your account is active, then deleted 90 days after you close it or after your last Pro period ends, whichever is later.
• Records we must keep for tax or accounting are kept by Paddle as Merchant of Record; we keep our own payout records for the period Saudi law requires.
• License check logs are kept for 30 days.

Your rights

• You can ask to see, correct, export, or delete your data, object to processing based on legitimate interest, or withdraw consent to news emails. Email atk@atkabli.com from the address you gave us. We answer within 30 days.
• You can close a Pro account at any time by emailing atk@atkabli.com. Closing it ends Pro; cancel any paid subscription first, from the link in your Paddle receipt email, so it does not renew.
• If you are in the EU or the UK, you may complain to your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). In Saudi Arabia it is SDAIA.

Security and breaches

Data travels over HTTPS and is stored with access limited to ATK. Sign-in links are single use and expire. If a breach puts your data at risk, we will notify the authorities and you as the law requires (for Saudi Arabia: SDAIA within 72 hours, and the Ministry of Commerce and you within 3 days; for the EU: the data protection authority of each affected country within 72 hours).

Children

Mixback is not directed at children under 16, and we do not knowingly create Pro accounts for them.

Changes

We post changes here with a new date. For a material change we email Pro account holders before it takes effect.

Contact

• To see or delete what we hold, email atk@atkabli.com.
• Mixback is made by ABDULLAH TALAL KABLI Establishment (ATK) in Riyadh, Saudi Arabia.